Connected by GlobalProtect but can't get access in spcecific port

[hamza-zidane]

Hello brothers.

I'm connected with GlobalProtec VPN, i can access to the local network from the external, i can ping on local machine, i can use rdp for some servers, but when i want use  mstsc for an @IP:port, for exemple 10.0.0.1:10100 in order to run some remote application, i can't do that, also i can telnet on 10.0.0.1 by 10100 port.

NB: when i use an internal machine i can access via  mstsc for an @IP:port, but with globalprotect i can't.

Thanks for help.

[Remo · Accepted solution]

Sounds like the app "ms-rdp" is only allowed for service "application-default on the VPN firewall.

[BPry]

@hamza-zidane,

To go along with what @Remo already pointed out, make sure that the device is actually getting identified correctly in the application logs. 

[hamza-zidane]

Hi brothers,

That's help me resolve the problem, but now i have another problem, normaly i have 2 types of users using vpn, type must get full access, and the second type access only for some specific port.

when i modify the security rule i try to add users but i can't find local users.

how can i solve this problem plz

Thanks.

[BPry]

@hamza-zidane,

They should show up I believe, but I can't be much help as I don't actively utilize local users for anything. If needed I would open up a TAC case and see what they can tell you on this one. 

Also note that users won't always show up in the dropdown and you sometimes simply have to enter the user in and hit okay. That dropdown box usually works, but you can expect it to show incorrectly occassionally. 

[hamza-zidane]

Hi,

we just need to enter the user name manually 🙂

[BPry]

@hamza-zidane,

Glad to hear that worked. Keep in mind going forward that the dropbox usually works, but if you run into the situation going forward always try to manually enter the information and see if it will validate the configuration.